RHSA-2026:9870
Vulnerability from csaf_opensuse - Published: 2026-04-22 00:00 - Updated: 2026-09-16 18:54Summary
security update for kernel
Severity
Moderate
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2026:9870.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:9870.
Patchnames: RHSA-2026:9870
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-50053
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-50053
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
13 products, the same list as for
CVE-2022-50053
Threats
Impact
important
Affected products
Recommended
13 products, the same list as for
CVE-2022-50053
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-50053
Threats
Impact
moderate
5.8 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-50053
Threats
Impact
moderate
Affected products
Recommended
13 products, the same list as for
CVE-2022-50053
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-50053
Threats
Impact
moderate
Affected products
Recommended
13 products, the same list as for
CVE-2022-50053
Threats
Impact
important
References
44 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2026:9870.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:9870.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2026:9870",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_9870.json"
},
{
"category": "self",
"summary": "URL for RHSA-2026:9870",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-May/005660.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2026:9870",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-May/005660.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50053 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50053/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-53539 page",
"url": "https://www.suse.com/security/cve/CVE-2023-53539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-38024 page",
"url": "https://www.suse.com/security/cve/CVE-2025-38024/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-38180 page",
"url": "https://www.suse.com/security/cve/CVE-2025-38180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-39973 page",
"url": "https://www.suse.com/security/cve/CVE-2025-39973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-71238 page",
"url": "https://www.suse.com/security/cve/CVE-2025-71238/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-23193 page",
"url": "https://www.suse.com/security/cve/CVE-2026-23193/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-23204 page",
"url": "https://www.suse.com/security/cve/CVE-2026-23204/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-23216 page",
"url": "https://www.suse.com/security/cve/CVE-2026-23216/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-23231 page",
"url": "https://www.suse.com/security/cve/CVE-2026-23231/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-16T18:54:58Z",
"generator": {
"date": "2026-04-22T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2026:9870",
"initial_release_date": "2026-04-22T00:00:00Z",
"revision_history": [
{
"date": "2026-04-22T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T18:10:49Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T18:54:58Z",
"number": "3",
"summary": "unknown changes"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"product": {
"name": "kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"product_id": "kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-whitelists@3.10.0-1160.148.1.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-3.10.0-1160.148.1.el7.noarch",
"product": {
"name": "kernel-doc-3.10.0-1160.148.1.el7.noarch",
"product_id": "kernel-doc-3.10.0-1160.148.1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@3.10.0-1160.148.1.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-3.10.0-1160.148.1.el7.x86_64",
"product": {
"name": "bpftool-3.10.0-1160.148.1.el7.x86_64",
"product_id": "bpftool-3.10.0-1160.148.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@3.10.0-1160.148.1.el7?arch=x86_64\u0026upstream=bpftool-3.10.0-1160.148.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-3.10.0-1160.148.1.el7.x86_64",
"product": {
"name": "kernel-3.10.0-1160.148.1.el7.x86_64",
"product_id": "kernel-3.10.0-1160.148.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@3.10.0-1160.148.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"product": {
"name": "kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"product_id": "kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@3.10.0-1160.148.1.el7?arch=x86_64\u0026upstream=kernel-debug-3.10.0-1160.148.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"product": {
"name": "kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"product_id": "kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@3.10.0-1160.148.1.el7?arch=x86_64\u0026upstream=kernel-debug-3.10.0-1160.148.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"product": {
"name": "kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"product_id": "kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@3.10.0-1160.148.1.el7?arch=x86_64\u0026upstream=kernel-source-3.10.0-1160.148.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"product": {
"name": "kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"product_id": "kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@3.10.0-1160.148.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"product": {
"name": "kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"product_id": "kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@3.10.0-1160.148.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"product": {
"name": "kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"product_id": "kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@3.10.0-1160.148.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"product": {
"name": "kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"product_id": "kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@3.10.0-1160.148.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-3.10.0-1160.148.1.el7.x86_64",
"product": {
"name": "perf-3.10.0-1160.148.1.el7.x86_64",
"product_id": "perf-3.10.0-1160.148.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@3.10.0-1160.148.1.el7?arch=x86_64\u0026upstream=perf-3.10.0-1160.148.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python-perf-3.10.0-1160.148.1.el7.x86_64",
"product": {
"name": "python-perf-3.10.0-1160.148.1.el7.x86_64",
"product_id": "python-perf-3.10.0-1160.148.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python-perf@3.10.0-1160.148.1.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 7 LTSS",
"product": {
"name": "SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-3.10.0-1160.148.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64"
},
"product_reference": "bpftool-3.10.0-1160.148.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-3.10.0-1160.148.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64"
},
"product_reference": "kernel-3.10.0-1160.148.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch"
},
"product_reference": "kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-3.10.0-1160.148.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64"
},
"product_reference": "kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64"
},
"product_reference": "kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-3.10.0-1160.148.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64"
},
"product_reference": "kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-3.10.0-1160.148.1.el7.noarch as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch"
},
"product_reference": "kernel-doc-3.10.0-1160.148.1.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-3.10.0-1160.148.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64"
},
"product_reference": "kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-3.10.0-1160.148.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64"
},
"product_reference": "kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64"
},
"product_reference": "kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64"
},
"product_reference": "kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-3.10.0-1160.148.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64"
},
"product_reference": "perf-3.10.0-1160.148.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-3.10.0-1160.148.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
},
"product_reference": "python-perf-3.10.0-1160.148.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-50053",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50053"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niavf: Fix reset error handling\n\nDo not call iavf_close in iavf_reset_task error handling. Doing so can\nlead to double call of napi_disable, which can lead to deadlock there.\nRemoving VF would lead to iavf_remove task being stuck, because it\nrequires crit_lock, which is held by iavf_close.\nCall iavf_disable_vf if reset fail, so that driver will clean up\nremaining invalid resources.\nDuring rapid VF resets, HW can fail to setup VF mailbox. Wrong\nerror handling can lead to iavf_remove being stuck with:\n[ 5218.999087] iavf 0000:82:01.0: Failed to init adminq: -53\n...\n[ 5267.189211] INFO: task repro.sh:11219 blocked for more than 30 seconds.\n[ 5267.189520] Tainted: G S E 5.18.0-04958-ga54ce3703613-dirty #1\n[ 5267.189764] \"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n[ 5267.190062] task:repro.sh state:D stack: 0 pid:11219 ppid: 8162 flags:0x00000000\n[ 5267.190347] Call Trace:\n[ 5267.190647] \u003cTASK\u003e\n[ 5267.190927] __schedule+0x460/0x9f0\n[ 5267.191264] schedule+0x44/0xb0\n[ 5267.191563] schedule_preempt_disabled+0x14/0x20\n[ 5267.191890] __mutex_lock.isra.12+0x6e3/0xac0\n[ 5267.192237] ? iavf_remove+0xf9/0x6c0 [iavf]\n[ 5267.192565] iavf_remove+0x12a/0x6c0 [iavf]\n[ 5267.192911] ? _raw_spin_unlock_irqrestore+0x1e/0x40\n[ 5267.193285] pci_device_remove+0x36/0xb0\n[ 5267.193619] device_release_driver_internal+0xc1/0x150\n[ 5267.193974] pci_stop_bus_device+0x69/0x90\n[ 5267.194361] pci_stop_and_remove_bus_device+0xe/0x20\n[ 5267.194735] pci_iov_remove_virtfn+0xba/0x120\n[ 5267.195130] sriov_disable+0x2f/0xe0\n[ 5267.195506] ice_free_vfs+0x7d/0x2f0 [ice]\n[ 5267.196056] ? pci_get_device+0x4f/0x70\n[ 5267.196496] ice_sriov_configure+0x78/0x1a0 [ice]\n[ 5267.196995] sriov_numvfs_store+0xfe/0x140\n[ 5267.197466] kernfs_fop_write_iter+0x12e/0x1c0\n[ 5267.197918] new_sync_write+0x10c/0x190\n[ 5267.198404] vfs_write+0x24e/0x2d0\n[ 5267.198886] ksys_write+0x5c/0xd0\n[ 5267.199367] do_syscall_64+0x3a/0x80\n[ 5267.199827] entry_SYSCALL_64_after_hwframe+0x46/0xb0\n[ 5267.200317] RIP: 0033:0x7f5b381205c8\n[ 5267.200814] RSP: 002b:00007fff8c7e8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001\n[ 5267.201981] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f5b381205c8\n[ 5267.202620] RDX: 0000000000000002 RSI: 00005569420ee900 RDI: 0000000000000001\n[ 5267.203426] RBP: 00005569420ee900 R08: 000000000000000a R09: 00007f5b38180820\n[ 5267.204327] R10: 000000000000000a R11: 0000000000000246 R12: 00007f5b383c06e0\n[ 5267.205193] R13: 0000000000000002 R14: 00007f5b383bb880 R15: 0000000000000002\n[ 5267.206041] \u003c/TASK\u003e\n[ 5267.206970] Kernel panic - not syncing: hung_task: blocked tasks\n[ 5267.207809] CPU: 48 PID: 551 Comm: khungtaskd Kdump: loaded Tainted: G S E 5.18.0-04958-ga54ce3703613-dirty #1\n[ 5267.208726] Hardware name: Dell Inc. PowerEdge R730/0WCJNT, BIOS 2.11.0 11/02/2019\n[ 5267.209623] Call Trace:\n[ 5267.210569] \u003cTASK\u003e\n[ 5267.211480] dump_stack_lvl+0x33/0x42\n[ 5267.212472] panic+0x107/0x294\n[ 5267.213467] watchdog.cold.8+0xc/0xbb\n[ 5267.214413] ? proc_dohung_task_timeout_secs+0x30/0x30\n[ 5267.215511] kthread+0xf4/0x120\n[ 5267.216459] ? kthread_complete_and_exit+0x20/0x20\n[ 5267.217505] ret_from_fork+0x22/0x30\n[ 5267.218459] \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50053",
"url": "https://www.suse.com/security/cve/CVE-2022-50053"
},
{
"category": "external",
"summary": "SUSE Bug 1245038 for CVE-2022-50053",
"url": "https://bugzilla.suse.com/1245038"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50053"
},
{
"cve": "CVE-2023-53539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-53539"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Fix incomplete state save in rxe_requester\n\nIf a send packet is dropped by the IP layer in rxe_requester()\nthe call to rxe_xmit_packet() can fail with err == -EAGAIN.\nTo recover, the state of the wqe is restored to the state before\nthe packet was sent so it can be resent. However, the routines\nthat save and restore the state miss a significnt part of the\nvariable state in the wqe, the dma struct which is used to process\nthrough the sge table. And, the state is not saved before the packet\nis built which modifies the dma struct.\n\nUnder heavy stress testing with many QPs on a fast node sending\nlarge messages to a slow node dropped packets are observed and\nthe resent packets are corrupted because the dma struct was not\nrestored. This patch fixes this behavior and allows the test cases\nto succeed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-53539",
"url": "https://www.suse.com/security/cve/CVE-2023-53539"
},
{
"category": "external",
"summary": "SUSE Bug 1251060 for CVE-2023-53539",
"url": "https://bugzilla.suse.com/1251060"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-53539"
},
{
"cve": "CVE-2025-38024",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-38024"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug\n\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x7d/0xa0 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0xcf/0x610 mm/kasan/report.c:489\n kasan_report+0xb5/0xe0 mm/kasan/report.c:602\n rxe_queue_cleanup+0xd0/0xe0 drivers/infiniband/sw/rxe/rxe_queue.c:195\n rxe_cq_cleanup+0x3f/0x50 drivers/infiniband/sw/rxe/rxe_cq.c:132\n __rxe_cleanup+0x168/0x300 drivers/infiniband/sw/rxe/rxe_pool.c:232\n rxe_create_cq+0x22e/0x3a0 drivers/infiniband/sw/rxe/rxe_verbs.c:1109\n create_cq+0x658/0xb90 drivers/infiniband/core/uverbs_cmd.c:1052\n ib_uverbs_create_cq+0xc7/0x120 drivers/infiniband/core/uverbs_cmd.c:1095\n ib_uverbs_write+0x969/0xc90 drivers/infiniband/core/uverbs_main.c:679\n vfs_write fs/read_write.c:677 [inline]\n vfs_write+0x26a/0xcc0 fs/read_write.c:659\n ksys_write+0x1b8/0x200 fs/read_write.c:731\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xaa/0x1b0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nIn the function rxe_create_cq, when rxe_cq_from_init fails, the function\nrxe_cleanup will be called to handle the allocated resources. In fact,\nsome memory resources have already been freed in the function\nrxe_cq_from_init. Thus, this problem will occur.\n\nThe solution is to let rxe_cleanup do all the work.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-38024",
"url": "https://www.suse.com/security/cve/CVE-2025-38024"
},
{
"category": "external",
"summary": "SUSE Bug 1245025 for CVE-2025-38024",
"url": "https://bugzilla.suse.com/1245025"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-38024"
},
{
"cve": "CVE-2025-38180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-38180"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: atm: fix /proc/net/atm/lec handling\n\n/proc/net/atm/lec must ensure safety against dev_lec[] changes.\n\nIt appears it had dev_put() calls without prior dev_hold(),\nleading to imbalance and UAF.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-38180",
"url": "https://www.suse.com/security/cve/CVE-2025-38180"
},
{
"category": "external",
"summary": "SUSE Bug 1245970 for CVE-2025-38180",
"url": "https://bugzilla.suse.com/1245970"
},
{
"category": "external",
"summary": "SUSE Bug 1245971 for CVE-2025-38180",
"url": "https://bugzilla.suse.com/1245971"
},
{
"category": "external",
"summary": "SUSE Bug 1253291 for CVE-2025-38180",
"url": "https://bugzilla.suse.com/1253291"
},
{
"category": "external",
"summary": "SUSE Bug 1253292 for CVE-2025-38180",
"url": "https://bugzilla.suse.com/1253292"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-22T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2025-38180"
},
{
"cve": "CVE-2025-39973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-39973"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: add validation for ring_len param\n\nThe `ring_len` parameter provided by the virtual function (VF)\nis assigned directly to the hardware memory context (HMC) without\nany validation.\n\nTo address this, introduce an upper boundary check for both Tx and Rx\nqueue lengths. The maximum number of descriptors supported by the\nhardware is 8k-32.\nAdditionally, enforce alignment constraints: Tx rings must be a multiple\nof 8, and Rx rings must be a multiple of 32.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-39973",
"url": "https://www.suse.com/security/cve/CVE-2025-39973"
},
{
"category": "external",
"summary": "SUSE Bug 1247374 for CVE-2025-39973",
"url": "https://bugzilla.suse.com/1247374"
},
{
"category": "external",
"summary": "SUSE Bug 1252035 for CVE-2025-39973",
"url": "https://bugzilla.suse.com/1252035"
},
{
"category": "external",
"summary": "SUSE Bug 1252036 for CVE-2025-39973",
"url": "https://bugzilla.suse.com/1252036"
},
{
"category": "external",
"summary": "SUSE Bug 1253291 for CVE-2025-39973",
"url": "https://bugzilla.suse.com/1253291"
},
{
"category": "external",
"summary": "SUSE Bug 1253292 for CVE-2025-39973",
"url": "https://bugzilla.suse.com/1253292"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-22T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2025-39973"
},
{
"cve": "CVE-2025-71238",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-71238"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix bsg_done() causing double free\n\nKernel panic observed on system,\n\n[5353358.825191] BUG: unable to handle page fault for address: ff5f5e897b024000\n[5353358.825194] #PF: supervisor write access in kernel mode\n[5353358.825195] #PF: error_code(0x0002) - not-present page\n[5353358.825196] PGD 100006067 P4D 0\n[5353358.825198] Oops: 0002 [#1] PREEMPT SMP NOPTI\n[5353358.825200] CPU: 5 PID: 2132085 Comm: qlafwupdate.sub Kdump: loaded Tainted: G W L ------- --- 5.14.0-503.34.1.el9_5.x86_64 #1\n[5353358.825203] Hardware name: HPE ProLiant DL360 Gen11/ProLiant DL360 Gen11, BIOS 2.44 01/17/2025\n[5353358.825204] RIP: 0010:memcpy_erms+0x6/0x10\n[5353358.825211] RSP: 0018:ff591da8f4f6b710 EFLAGS: 00010246\n[5353358.825212] RAX: ff5f5e897b024000 RBX: 0000000000007090 RCX: 0000000000001000\n[5353358.825213] RDX: 0000000000001000 RSI: ff591da8f4fed090 RDI: ff5f5e897b024000\n[5353358.825214] RBP: 0000000000010000 R08: ff5f5e897b024000 R09: 0000000000000000\n[5353358.825215] R10: ff46cf8c40517000 R11: 0000000000000001 R12: 0000000000008090\n[5353358.825216] R13: ff591da8f4f6b720 R14: 0000000000001000 R15: 0000000000000000\n[5353358.825218] FS: 00007f1e88d47740(0000) GS:ff46cf935f940000(0000) knlGS:0000000000000000\n[5353358.825219] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[5353358.825220] CR2: ff5f5e897b024000 CR3: 0000000231532004 CR4: 0000000000771ef0\n[5353358.825221] PKRU: 55555554\n[5353358.825222] Call Trace:\n[5353358.825223] \u003cTASK\u003e\n[5353358.825224] ? show_trace_log_lvl+0x1c4/0x2df\n[5353358.825229] ? show_trace_log_lvl+0x1c4/0x2df\n[5353358.825232] ? sg_copy_buffer+0xc8/0x110\n[5353358.825236] ? __die_body.cold+0x8/0xd\n[5353358.825238] ? page_fault_oops+0x134/0x170\n[5353358.825242] ? kernelmode_fixup_or_oops+0x84/0x110\n[5353358.825244] ? exc_page_fault+0xa8/0x150\n[5353358.825247] ? asm_exc_page_fault+0x22/0x30\n[5353358.825252] ? memcpy_erms+0x6/0x10\n[5353358.825253] sg_copy_buffer+0xc8/0x110\n[5353358.825259] qla2x00_process_vendor_specific+0x652/0x1320 [qla2xxx]\n[5353358.825317] qla24xx_bsg_request+0x1b2/0x2d0 [qla2xxx]\n\nMost routines in qla_bsg.c call bsg_done() only for success cases.\nHowever a few invoke it for failure case as well leading to a double\nfree. Validate before calling bsg_done().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-71238",
"url": "https://www.suse.com/security/cve/CVE-2025-71238"
},
{
"category": "external",
"summary": "SUSE Bug 1259186 for CVE-2025-71238",
"url": "https://bugzilla.suse.com/1259186"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-71238"
},
{
"cve": "CVE-2026-23193",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-23193"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()\n\nIn iscsit_dec_session_usage_count(), the function calls complete() while\nholding the sess-\u003esession_usage_lock. Similar to the connection usage count\nlogic, the waiter signaled by complete() (e.g., in the session release\npath) may wake up and free the iscsit_session structure immediately.\n\nThis creates a race condition where the current thread may attempt to\nexecute spin_unlock_bh() on a session structure that has already been\ndeallocated, resulting in a KASAN slab-use-after-free.\n\nTo resolve this, release the session_usage_lock before calling complete()\nto ensure all dereferences of the sess pointer are finished before the\nwaiter is allowed to proceed with deallocation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-23193",
"url": "https://www.suse.com/security/cve/CVE-2026-23193"
},
{
"category": "external",
"summary": "SUSE Bug 1258414 for CVE-2026-23193",
"url": "https://bugzilla.suse.com/1258414"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-23193"
},
{
"cve": "CVE-2026-23204",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-23204"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: cls_u32: use skb_header_pointer_careful()\n\nskb_header_pointer() does not fully validate negative @offset values.\n\nUse skb_header_pointer_careful() instead.\n\nGangMin Kim provided a report and a repro fooling u32_classify():\n\nBUG: KASAN: slab-out-of-bounds in u32_classify+0x1180/0x11b0\nnet/sched/cls_u32.c:221",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-23204",
"url": "https://www.suse.com/security/cve/CVE-2026-23204"
},
{
"category": "external",
"summary": "SUSE Bug 1258340 for CVE-2026-23204",
"url": "https://bugzilla.suse.com/1258340"
},
{
"category": "external",
"summary": "SUSE Bug 1259126 for CVE-2026-23204",
"url": "https://bugzilla.suse.com/1259126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-22T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-23204"
},
{
"cve": "CVE-2026-23216",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-23216"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()\n\nIn iscsit_dec_conn_usage_count(), the function calls complete() while\nholding the conn-\u003econn_usage_lock. As soon as complete() is invoked, the\nwaiter (such as iscsit_close_connection()) may wake up and proceed to free\nthe iscsit_conn structure.\n\nIf the waiter frees the memory before the current thread reaches\nspin_unlock_bh(), it results in a KASAN slab-use-after-free as the function\nattempts to release a lock within the already-freed connection structure.\n\nFix this by releasing the spinlock before calling complete().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-23216",
"url": "https://www.suse.com/security/cve/CVE-2026-23216"
},
{
"category": "external",
"summary": "SUSE Bug 1258447 for CVE-2026-23216",
"url": "https://bugzilla.suse.com/1258447"
},
{
"category": "external",
"summary": "SUSE Bug 1258448 for CVE-2026-23216",
"url": "https://bugzilla.suse.com/1258448"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-23216"
},
{
"cve": "CVE-2026-23231",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-23231"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: fix use-after-free in nf_tables_addchain()\n\nnf_tables_addchain() publishes the chain to table-\u003echains via\nlist_add_tail_rcu() (in nft_chain_add()) before registering hooks.\nIf nf_tables_register_hook() then fails, the error path calls\nnft_chain_del() (list_del_rcu()) followed by nf_tables_chain_destroy()\nwith no RCU grace period in between.\n\nThis creates two use-after-free conditions:\n\n 1) Control-plane: nf_tables_dump_chains() traverses table-\u003echains\n under rcu_read_lock(). A concurrent dump can still be walking\n the chain when the error path frees it.\n\n 2) Packet path: for NFPROTO_INET, nf_register_net_hook() briefly\n installs the IPv4 hook before IPv6 registration fails. Packets\n entering nft_do_chain() via the transient IPv4 hook can still be\n dereferencing chain-\u003eblob_gen_X when the error path frees the\n chain.\n\nAdd synchronize_rcu() between nft_chain_del() and the chain destroy\nso that all RCU readers -- both dump threads and in-flight packet\nevaluation -- have finished before the chain is freed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-23231",
"url": "https://www.suse.com/security/cve/CVE-2026-23231"
},
{
"category": "external",
"summary": "SUSE Bug 1259188 for CVE-2026-23231",
"url": "https://bugzilla.suse.com/1259188"
},
{
"category": "external",
"summary": "SUSE Bug 1259189 for CVE-2026-23231",
"url": "https://bugzilla.suse.com/1259189"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.148.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.148.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.148.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-22T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-23231"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…